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Amendments to the Specification : 

Please replace the pardgraph bridging pages 6 and 7 with the following amended paragraph: 

in one embodiment, the published certificate repository 12 publishes certificates 
in a hierarchical manner, for example in accordance with the X.500 series of recommendations. 
Alternatively, the published certificate repository 12 can be arranged in any convenient fashion. 
The certificates may be stored in a database, in an LDAP (Hghtwei^ directory access protocol) 
directory, in file based storage, or in Microsoft's Active Directory, to name a few examples. The 
X.500 series of recommendations allows for the inclusion of a unique user name for each user 
referred to as a "distinguished name", or DN. It is also possible to include additional information 
for each user in certificate extensions, such as the "subject alternative name" extension provided 
by the X.500 series of recommendations. RFC 2459 (available from the Internet EnoineeriTip 
Task Force fFRTQ s ee http.7/wwwr.iotf or&^rfc/rfc2 4 5 »') provides a profile of using the X.509 
recoinmcndatiou for Internet PKI. Conventional uses for the subject altemative name extension 
are described in RFC 2632 (also available from the TFTF see h:ttp://wrwrvv.iotf.org/rfo/rfc26'32) 
which details the use of the subject altemative name extension in S-MIME. Tn this embodiment 
of the mvention, a certificate extension and prclerably the subject altemative name extension-is 
used to store an addressable entity in association witli each user name. The addressable entity 
might for example be the user's e-mail address, but it might alternatively be some other type, for 
example, a user's alphanumeric pager identifier. More generally, the addressable entity might be 
any identi fication of a contact channel to the particular user. Rather than the use of a certificate 
extension in a published certificate repository, more generally some sort of user name-, 
addressable entity mapping needs to be made available, and preferably this is a trusted mappmg 
in the sense that the information it contains can be trusted. 

Please replace the Abstract with the following amended Abstract: 

Abstract of the Invention 

Apparatus and methods are provided for performing remote notification of 
records, each having a respective record identifier. Tho method iavolvoa maintaini ng A record- 
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user mapping wfeioh associates with each of a plurality of record idontifiors ideutificr a respective 
one or more user names. For each record upon which remote notificattoii is to be performed the 
fe cord'g r e cord idomificr - s respective one or more user names is obtained from the record-user 
mapping[[.]]^,aiid Fof for each user name - in the rccord'c record idontifior'G rcGpcctivo ono or 
ffiOfe obtained user names name a respective addressable entity is obtained &om a user name- 
addressable entity mapping, ead [[a]] A notification of the record is sent to the addressable entity, 
-¥hfriis er nam e addroGoablo ontit>^ mapping may bo a trust e d mopping. Th e rceords may b e 
genefgte d by a certi l icato managcmcmt syjrtom. In this oaiio, tho addrooflablc entiti e s may bo 
Gtorcd in a r e pository of published cortificatca. The cortificatQ manag e ment syst e m might f<^ 
e xample -be- a PKI (Public Koy Mmslructuro), The addrossablo ontitioa maybe ctorod in a 
c e rtificate ex - tension field of tho c e rtificates; - for e xam p l e- th e subject altomative name cortifiogtc 
ex tension. The nddroGsablc entity may b e an E mail addrcs fi? Target audit record processing may 
also be provided. For this, at least on o each record identifier is- identifi e d for which target a»dit 
record processing is to be performed rr.1 L a target user name is read Th e target audit r e cord 
proccofling involvca for oaoh record idontifi e r for which target audit r e cord procoosing is to bo 
perfiam i e d r e ading from the associated record a 4arg e t us e r nim te, a respective addressable entity 
is obtained obtaining from the user name-addressable entity mapping, a rospcoti v e - addr e SGablQ 
e ntity for th e- targ e t user namo and sendiag a notification of the record is sent to the addressable 
entity. 
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